ixp_npe LE issues:

(Microcode loads, using byteswapped 2.3)

On configuring networking:
Configuring network interfaces... udhcpc (v1.2.1) started                       
Unexpected answer: Send 0000100b:40008400 Ret 0000100b:01000201                 
Unexpected answer: Send 0000100e:00000000 Ret 0000100e:01000201                 
eth0: link down                                                                 
Sending discover...                                                             
Sending discover...                                                             
Sending discover...                                                             

On bringing down eth0 (ifconfig eth0 down):
Unable to handle kernel paging request at virtual address 6a592dd2              
pgd = c1db0000                                                                  
[6a592dd2] *pgd=00000000                                                        
Internal error: Oops: f3 [#1]                                                   
Modules linked in: i2c_dev ixp4xx_rng usb_storage ehci_hcd ohci_hcd usbcore scss
CPU: 0                                                                          
PC is at queue_drain+0x3c/0xa4 [ixp4xx_mac]                                     
LR is at ixmac_close+0x6c/0x78 [ixp4xx_mac]                                     
pc : [<bf015f70>]    lr : [<bf0150ac>]    Not tainted                           
sp : c19f5e4c  ip : c19f5e64  fp : c19f5e60                                     
r10: c195522c  r9 : c028a000  r8 : bef0dd94                                     
r7 : c1955220  r6 : 00001003  r5 : c02a6640  r4 : 6a592db2                      
r3 : c0f0cf80  r2 : 80cff000  r1 : 00000022  r0 : 80cff000                      
Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  Segment user                        
Control: 397F  Table: 01DB0000  DAC: 00000015                                   
Process ifconfig (pid: 774, stack limit = 0xc19f4250)                           
Stack: (0xc19f5e4c to 0xc19f6000)                                               
5e40:                            00000001 c028a280 c19f5e78 c19f5e64 bf0150ac   
5e60: bf015f40 c028a000 00001002 c19f5e8c c19f5e7c c012c334 bf01504c c028a000   
5e80: c19f5eac c19f5e90 c012b3b4 c012c2c4 00000000 c18ddee0 c19f5ec8 c1955220   
5ea0: c19f5f10 c19f5eb0 c016fe04 c012b364 00008914 00000000 30687465 00000000   
5ec0: 00000000 00000000 000a1002 00000000 0000000c 0008eec4 000a1002 00000000   
5ee0: 0000000c 0008eec4 c1ea3f40 00008914 bef0dd94 00000036 c001cfa4 c19f4000   
5f00: 00000000 c19f5f20 c19f5f14 c01706f8 c016fb60 c19f5f3c c19f5f24 c01206d0   
5f20: c0170654 c1ea3f40 00008914 bef0dd94 c19f5f58 c19f5f40 c008c8b4 c01204fc   
5f40: c1ea3f40 00000003 bef0dd94 c19f5f84 c19f5f5c c008cbdc c008c88c c19f5fb0   
5f60: 00000000 c1ea3f40 fffffff7 00008914 00000036 c001cfa4 c19f5fa4 c19f5f88   
5f80: c008cc4c c008c920 00000000 00000001 00000015 bef0de6c 00000000 c19f5fa8   
5fa0: c001ce00 c008cc18 00000001 00000015 00000003 00008914 bef0dd94 00000001   
5fc0: 00000001 00000015 bef0de6c 00000003 00000000 00000000 00000000 00098ae4   
5fe0: 000a44d8 bef0dd0c 00069998 40174924 60000010 00000003 00000000 00000000   
Backtrace:                                                                      
[<bf015f34>] (queue_drain+0x0/0xa4 [ixp4xx_mac]) from [<bf0150ac>] (ixmac_close)
 r5 = C028A280  r4 = 00000001                                                   
[<bf015040>] (ixmac_close+0x0/0x78 [ixp4xx_mac]) from [<c012c334>] (dev_close+0)
 r5 = 00001002  r4 = C028A000                                                   
[<c012c2b8>] (dev_close+0x0/0xa4) from [<c012b3b4>] (dev_change_flags+0x5c/0x13)
 r4 = C028A000                                                                  
[<c012b358>] (dev_change_flags+0x0/0x130) from [<c016fe04>] (devinet_ioctl+0x2b)
 r7 = C1955220  r6 = C19F5EC8  r5 = C18DDEE0  r4 = 00000000                     
[<c016fb54>] (devinet_ioctl+0x0/0x6cc) from [<c01706f8>] (inet_ioctl+0xb0/0xe0) 
[<c0170648>] (inet_ioctl+0x0/0xe0) from [<c01206d0>] (sock_ioctl+0x1e0/0x240)   
[<c01204f0>] (sock_ioctl+0x0/0x240) from [<c008c8b4>] (do_ioctl+0x34/0x94)      
 r6 = BEF0DD94  r5 = 00008914  r4 = C1EA3F40                                    
[<c008c880>] (do_ioctl+0x0/0x94) from [<c008cbdc>] (vfs_ioctl+0x2c8/0x2f8)      
 r6 = BEF0DD94  r5 = 00000003  r4 = C1EA3F40                                    
[<c008c914>] (vfs_ioctl+0x0/0x2f8) from [<c008cc4c>] (sys_ioctl+0x40/0x60)      
 r8 = C001CFA4  r7 = 00000036  r6 = 00008914  r5 = FFFFFFF7                     
 r4 = C1EA3F40                                                                  
[<c008cc0c>] (sys_ioctl+0x0/0x60) from [<c001ce00>] (ret_fast_syscall+0x0/0x2c) 
 r6 = BEF0DE6C  r5 = 00000015  r4 = 00000001                                    
Code: e1a03423 e0233462 e2833103 e5934028 (e5940020)                            
 Segmentation fault                                                             

ifconfig eth0 up freezes console